Skip to content

build(deps): bump the gh-actions-packages group with 3 updates - #125

Merged
anmarchenko merged 1 commit into
mainfrom
dependabot/github_actions/gh-actions-packages-e4aaa82325
Sep 2, 2026
Merged

build(deps): bump the gh-actions-packages group with 3 updates#125
anmarchenko merged 1 commit into
mainfrom
dependabot/github_actions/gh-actions-packages-e4aaa82325

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the gh-actions-packages group with 3 updates: datadog/test-visibility-github-action, actions/setup-node and DataDog/dd-octo-sts-action.

Updates datadog/test-visibility-github-action from 3.0.0 to 3.1.0

Release notes

Sourced from datadog/test-visibility-github-action's releases.

v3.1.0

What's Changed

Full Changelog: DataDog/test-visibility-github-action@v3.0.0...v3.1.0

Commits

Updates actions/setup-node from 6.3.0 to 7.0.0

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

Updates DataDog/dd-octo-sts-action from 1.0.4 to 1.0.5

Release notes

Sourced from DataDog/dd-octo-sts-action's releases.

v1.0.5

Commits
  • c85802a Merge pull request #26 from DataDog/qiwen.chen/add-client-version-headers
  • 48b1149 update readme example
  • 31e598e Add client name/version headers to STS exchange requests
  • d557589 Merge pull request #17 from DataDog/feature/oidc-claims-debug
  • 8641d85 Fix token hash encoding
  • 10bd475 deduplicate JWT parsing
  • e5d6667 Merge remote-tracking branch 'origin/main' into feature/oidc-claims-debug
  • 19f21ae Merge pull request #25 from DataDog/dependabot/npm_and_yarn/npm_and_yarn-8455...
  • 95aa0f7 Bump brace-expansion in the npm_and_yarn group across 1 directory
  • f62c2a0 Merge pull request #22 from DataDog/engraver-auto-version-upgrade/minorpatch/...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gh-actions-packages group with 3 updates: [datadog/test-visibility-github-action](https://github.com/datadog/test-visibility-github-action), [actions/setup-node](https://github.com/actions/setup-node) and [DataDog/dd-octo-sts-action](https://github.com/datadog/dd-octo-sts-action).


Updates `datadog/test-visibility-github-action` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/datadog/test-visibility-github-action/releases)
- [Changelog](https://github.com/DataDog/test-visibility-github-action/blob/main/RELEASE.md)
- [Commits](DataDog/test-visibility-github-action@d6d648d...d7e3562)

Updates `actions/setup-node` from 6.3.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@53b8394...8207627)

Updates `DataDog/dd-octo-sts-action` from 1.0.4 to 1.0.5
- [Release notes](https://github.com/datadog/dd-octo-sts-action/releases)
- [Commits](DataDog/dd-octo-sts-action@96a2546...c85802a)

---
updated-dependencies:
- dependency-name: datadog/test-visibility-github-action
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: DataDog/dd-octo-sts-action
  dependency-version: 1.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 1, 2026 16:28
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 1, 2026

@datadog-datadog-prod-us1 datadog-datadog-prod-us1 Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Datadog Autotest: PASS

More details

The new action versions use the existing workflow inputs and permissions. The changed workflow lines have no reportable defect.

Was this helpful? React 👍 or 👎

Open Bits AI session

🤖 Datadog Autotest · Commit 92b81c1 · What is Autotest? · @DataDog review to ask questions · Any feedback? Reach out in #autotest

@anmarchenko anmarchenko left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Verified trusted Dependabot identity and SHA-pinned action updates. Required test, lint, and mergegate checks are green.

@anmarchenko
anmarchenko merged commit caa0224 into main Sep 2, 2026
18 checks passed
@anmarchenko
anmarchenko deleted the dependabot/github_actions/gh-actions-packages-e4aaa82325 branch September 2, 2026 07:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant